$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft File: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft (raw, json) Hash identifier: aOpSWqxb+09jZrnY9/ImhvXR91Y2FcgoEv3iemOl/dQ= Subject key identifier: 3E:6B:27:51:C2:A9:E5:BC:AA:28:56:6F:6D:A8:A8:2B:5F:39:85:7D Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B Certificate issuer: /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Certificate serial: 602661EE956FE0B1CDFB896F2A6F9BD51595B1F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft Manifest number: 0217 Signing time: Fri 17 Apr 2026 11:51:56 +0000 Manifest this update: Fri 17 Apr 2026 11:46:56 +0000 Manifest next update: Mon 20 Apr 2026 15:32:56 +0000 Files and hashes: 1: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl (hash: n34rDZUpyqHpfS41Y5506ubvUUJULGRPgaGm/Pz4Vno=) 2: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: 4d1ijz/rU+DejuJXb/c4cK45ZvNx5vBw0rsE3pI0Nk8=) 3: 3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (hash: A15JvoKxrrNNly8QbNKG17HNlGfUgFoFqcNw47K8k1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 15:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:26:61:ee:95:6f:e0:b1:cd:fb:89:6f:2a:6f:9b:d5:15:95:b1:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Validity Not Before: Apr 17 11:46:56 2026 GMT Not After : Apr 20 15:32:56 2026 GMT Subject: CN=3E6B2751C2A9E5BCAA28566F6DA8A82B5F39857D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1b:6b:c0:91:fa:cd:64:54:6f:1b:7f:fb:fc: a6:1d:65:e9:ed:02:46:19:c6:46:60:70:a3:aa:46: 45:a7:13:b0:ca:a5:c9:b1:e8:fa:18:f2:2f:b4:85: e0:c9:89:f4:6c:11:9a:30:ca:1b:4f:9d:53:8d:de: 5c:81:64:fe:10:7e:ee:24:c1:09:2e:bb:80:9e:ed: 97:fc:97:d7:eb:7f:cc:ce:15:99:12:c7:1d:4a:7c: de:84:78:69:95:7d:6b:53:d0:1c:7e:b9:4b:96:a6: 70:13:02:d1:56:07:56:2f:a1:73:cb:62:d0:73:75: 92:86:aa:08:6f:81:74:1a:40:50:9f:cd:12:72:84: df:f0:f7:b2:1c:4d:c5:83:db:3e:ca:05:70:9e:3e: 44:16:8d:82:05:3e:3c:cc:28:4e:60:12:f7:f1:60: 11:4d:64:55:6e:4c:97:90:74:10:5f:48:3d:c3:bf: a6:60:af:92:fb:0c:be:a6:bc:d6:1e:fb:80:17:ad: 61:a4:8c:9f:85:44:ea:02:8f:70:cc:2c:8e:c8:4b: b8:9c:8a:66:74:b6:4b:55:34:c5:a5:8b:0b:8f:72: b4:e6:7e:10:aa:99:21:64:77:9c:dc:4c:ae:d0:93: 1d:4d:50:c0:9d:d1:04:88:a0:55:6e:0f:37:d2:ce: 71:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6B:27:51:C2:A9:E5:BC:AA:28:56:6F:6D:A8:A8:2B:5F:39:85:7D X509v3 Authority Key Identifier: keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:22:fc:86:1e:7f:ed:60:fd:3c:5b:c1:4e:78:f2:29:fe:e4: a1:4c:80:46:06:65:e6:5c:47:0f:25:a6:be:3e:ac:a5:38:02: a2:ae:ca:e8:fd:50:78:41:1d:06:7d:7a:9b:9d:ed:57:6a:7b: 9e:6d:11:99:41:24:2f:3d:fb:f9:4b:55:49:bb:67:7e:d0:ff: 2a:fe:e8:5f:08:4d:ec:0c:05:67:eb:98:e2:34:38:86:80:2f: f2:8a:cb:8e:42:55:69:16:f7:65:f4:81:0d:fd:45:5a:1d:52: ce:67:cb:d3:68:2a:b6:5e:1b:c0:9b:46:ea:fb:56:a0:b2:b4: 08:3c:17:f7:e9:9e:06:39:80:61:0b:32:e3:48:3f:6e:f4:a4: 0e:85:2b:21:0a:d3:dc:6a:b9:5e:a4:cb:27:49:8c:c6:19:28: ce:4c:c3:17:76:46:ef:3e:1c:7a:1a:02:3d:31:d7:5e:ca:62: b0:18:23:92:65:6c:2d:ef:17:f4:d3:f8:3c:28:3f:c5:dc:4a: d2:8a:3b:91:99:e1:e3:7f:70:a8:3b:32:53:60:1e:86:ae:31: 87:90:18:03:ec:90:7f:82:e6:2d:7d:22:4a:49:eb:df:16:a7: 21:0a:f5:74:54:cc:9e:37:dc:9b:63:c9:1d:78:e1:a7:d7:6a: 8a:c0:dc:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYCZh7pVv4LHN+4lvKm+b1RWVsfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1 RUVDMjM5QjAeFw0yNjA0MTcxMTQ2NTZaFw0yNjA0MjAxNTMyNTZaMDMxMTAvBgNV BAMTKDNFNkIyNzUxQzJBOUU1QkNBQTI4NTY2RjZEQThBODJCNUYzOTg1N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGG2vAkfrNZFRvG3/7/KYdZent AkYZxkZgcKOqRkWnE7DKpcmx6PoY8i+0heDJifRsEZowyhtPnVON3lyBZP4Qfu4k wQkuu4Ce7Zf8l9frf8zOFZkSxx1KfN6EeGmVfWtT0Bx+uUuWpnATAtFWB1YvoXPL YtBzdZKGqghvgXQaQFCfzRJyhN/w97IcTcWD2z7KBXCePkQWjYIFPjzMKE5gEvfx YBFNZFVuTJeQdBBfSD3Dv6Zgr5L7DL6mvNYe+4AXrWGkjJ+FROoCj3DMLI7IS7ic imZ0tktVNMWliwuPcrTmfhCqmSFkd5zcTK7Qkx1NUMCd0QSIoFVuDzfSznEhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPmsnUcKp5byqKFZvbaioK185hX0wHwYDVR0j BBgwFoAUPFLUqGq93Q1tpjFzf3jcIF7sI5swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mzc2OTRiNy0zMjU2LTQ2NjYtYTNmZS02ZTgyZTc4M2IxZTEvMC8zQzUyRDRBODZB QkRERDBENkRBNjMxNzM3Rjc4REMyMDVFRUMyMzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1RUVD MjM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz ZmUtNmU4MmU3ODNiMWUxLzAvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERD MjA1RUVDMjM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEi/IYef+1g/TxbwU548in+5KFMgEYGZeZc Rw8lpr4+rKU4AqKuyuj9UHhBHQZ9epud7Vdqe55tEZlBJC89+/lLVUm7Z37Q/yr+ 6F8ITewMBWfrmOI0OIaAL/KKy45CVWkW92X0gQ39RVodUs5ny9NoKrZeG8CbRur7 VqCytAg8F/fpngY5gGELMuNIP270pA6FKyEK09xquV6kyydJjMYZKM5Mwxd2Ru8+ HHoaAj0x117KYrAYI5JlbC3vF/TT+DwoP8XcStKKO5GZ4eN/cKg7MlNgHoauMYeQ GAPskH+C5i19IkpJ698WpyEK9XRUzJ433JtjyR144afXaorA3Oc= -----END CERTIFICATE-----Generated at Sat Apr 18 01:05:14 2026 by rpki-client